Описание
Cross-site scripting (XSS) vulnerability in the view-based webform results table in the Webform module 7.x-4.x before 7.x-4.4 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via a webform.
Ссылки
- Vendor Advisory
- Patch
- Vendor Advisory
- Patch
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:webform_project:webform:7.x-4.0:*:*:*:*:drupal:*:*
cpe:2.3:a:webform_project:webform:7.x-4.1:*:*:*:*:drupal:*:*
cpe:2.3:a:webform_project:webform:7.x-4.2:*:*:*:*:drupal:*:*
cpe:2.3:a:webform_project:webform:7.x-4.3:*:*:*:*:drupal:*:*
EPSS
Процентиль: 39%
0.00175
Низкий
3.5 Low
CVSS2
Дефекты
CWE-79
Связанные уязвимости
github
больше 3 лет назад
Cross-site scripting (XSS) vulnerability in the view-based webform results table in the Webform module 7.x-4.x before 7.x-4.4 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via a webform.
EPSS
Процентиль: 39%
0.00175
Низкий
3.5 Low
CVSS2
Дефекты
CWE-79